<html>
<head>
<title>Location header with CR/LF injected (Meta Tag \r\n)</title>
<meta http-equiv="refresh" content="0;url=http://attacker.com/testcases/headertests/header-injection-meta-refresh-1.rpy? HTTP/1.0\r\nx-injheader: NewHeader;" />
</head>
<body></body>
</html>

